Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
File:                     323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (raw, json)
Hash identifier:          jvD5r5BZkG6b+zHoUlh5i/c0KnaJiirQbyxwg7qQ+zs=
Subject key identifier:   09:15:4F:B4:ED:EC:55:C7:B3:83:81:08:F8:7F:71:D2:61:B1:C9:B5
Certificate issuer:       /CN=F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD
Certificate serial:       5453BB890FBE04ECE5EE63F5805E4524FAD95A5D
Authority key identifier: F2:1F:F2:19:77:D1:1A:CE:5D:3F:4C:7A:14:D3:EE:36:C3:CA:2E:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
Signing time:             Fri 12 Jan 2024 13:04:01 +0000
ROA not before:           Fri 12 Jan 2024 12:59:01 +0000
ROA not after:            Fri 10 Jan 2025 13:04:01 +0000
asID:                     263568
IP address blocks:        2801:80:740::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:53:bb:89:0f:be:04:ec:e5:ee:63:f5:80:5e:45:24:fa:d9:5a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD
        Validity
            Not Before: Jan 12 12:59:01 2024 GMT
            Not After : Jan 10 13:04:01 2025 GMT
        Subject: CN=09154FB4EDEC55C7B3838108F87F71D261B1C9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7f:6e:f9:0a:5f:9c:9a:9d:4e:93:7c:0c:f5:
                    1f:de:dd:25:a0:67:5a:d1:eb:5f:37:68:de:a2:3d:
                    4a:71:90:fb:ea:26:1c:5e:01:ef:6c:30:2f:4b:e4:
                    03:b5:c3:7d:d9:40:43:40:b9:3c:25:75:18:86:5d:
                    80:7d:2f:a6:07:9c:83:06:14:17:3b:4e:48:5d:46:
                    89:16:8b:53:6a:cd:6e:be:94:f0:c1:2d:b9:70:41:
                    90:3d:54:cc:81:07:b7:dd:a6:f6:07:2b:b0:1c:1d:
                    13:8d:8a:04:4b:66:81:60:78:1a:ef:8d:08:67:a0:
                    f8:49:f1:a8:18:1d:ed:67:fe:43:73:3d:7b:d1:5d:
                    cb:fc:2a:0b:4e:f9:c5:a1:b4:26:92:3b:74:49:fb:
                    7d:81:0b:cc:7d:b5:2f:48:19:f6:6c:0a:39:df:71:
                    b4:43:ed:91:a3:77:98:c4:79:2e:17:68:b4:07:70:
                    1a:ca:f0:c8:43:f5:3c:e9:28:26:0f:03:19:02:13:
                    ab:5a:a5:a5:9a:3a:cd:f6:43:d9:38:d6:4d:75:44:
                    f9:01:3f:e3:5f:54:cd:6b:bc:10:a8:c2:2d:d6:2b:
                    9a:a3:3e:8f:7d:6c:b0:4d:68:00:d0:82:5f:a8:72:
                    f7:d3:86:f7:e5:ec:76:c6:73:bf:7d:14:5d:c6:a6:
                    6f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:15:4F:B4:ED:EC:55:C7:B3:83:81:08:F8:7F:71:D2:61:B1:C9:B5
            X509v3 Authority Key Identifier:
                keyid:F2:1F:F2:19:77:D1:1A:CE:5D:3F:4C:7A:14:D3:EE:36:C3:CA:2E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FF21977D11ACE5D3F4C7A14D3EE36C3CA2EBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:740::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:cb:df:f9:54:94:2c:ad:b0:59:1c:53:77:55:4b:93:08:
         7d:eb:6a:a9:b3:7d:a0:12:c6:8a:b8:f9:f9:f1:aa:79:9e:80:
         56:d0:7b:31:81:ba:4f:59:04:9b:47:98:82:f8:73:1a:ee:e0:
         3f:1f:8b:68:88:ab:79:3f:f5:54:55:75:66:01:64:56:4d:a6:
         56:89:dc:62:92:1d:53:30:88:5b:3a:1f:22:db:00:64:bc:be:
         5f:93:96:b3:e0:ae:14:93:88:5c:6c:03:e0:e9:9f:ef:df:55:
         4c:ca:a3:9e:c4:77:a2:bc:c3:00:83:c0:1a:1b:cd:80:20:be:
         58:1d:2b:f5:39:c9:4e:89:b2:2b:ca:80:52:f1:72:52:a6:2c:
         57:4a:9c:fc:6a:41:68:7f:41:da:e9:48:c8:21:f0:8d:9e:43:
         48:4f:d6:53:8c:da:e4:bd:4e:fa:23:47:03:05:5e:ee:6f:63:
         89:64:be:09:31:7d:93:43:3e:c0:cd:52:c2:9a:ed:7c:18:2e:
         74:4d:6b:ec:7b:e7:e9:a9:6a:11:ab:39:63:fe:b5:e0:79:ba:
         a5:d0:f3:eb:10:67:de:b2:38:33:a5:35:07:fa:5c:b0:27:51:
         9f:cb:6e:d4:b0:2e:05:46:94:9a:44:4c:2f:b8:2b:25:18:49:
         4c:b2:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org